Privacy policy

We collect what we need to send you a piece, look after you afterwards, and, only with your permission, to stay in touch. We never sell your personal information. You can see, correct, export or delete your data, and withdraw consent, at any time. This notice is written to meet India's DPDP framework, the EU/UK GDPR and US state privacy laws together.

1. Who We Are (the data controller / fiduciary)

JEMFYRD is operated by Dekulture Works Pvt. Ltd., E-222, UDB Harmony Apartments, Ajmer Road, Mahapura, Jaipur 302026, Rajasthan, India, company registration (CIN) U74999RJ2019PTC066314, GST 08AAHCD4301P1ZH. Our store is at jemfyrd.shop.

Grievance Officer / Data Protection contact	jemfyrd@dekulture.com
Registered address	E-222, UDB Harmony Apartments, Ajmer Road, Mahapura, Jaipur 302026, Rajasthan, India

2. What We Collect

• Identity and contact details: name, email, phone, billing and shipping addresses
• Order and account data: purchases, Provenance and engraving personalisation, membership tier, preferences, returns and service history
• Payment data: processed by our gateways. We receive confirmation and limited details, not full card numbers
• Communications and content: messages to us, reviews, and any photos or videos you submit for "Seen On Our Muses" and other user-generated content
• Technical and usage data: IP address, device and browser data, and cookie identifiers
• Marketing data: your consents and channel preferences for email, SMS and WhatsApp

We do not intentionally collect sensitive personal data, biometric, health or government-ID data through the store.

3. Why We Use It, and Our Legal Basis

Purpose	Legal Basis (GDPR) / DPDP
Process and deliver your order; provide warranty, repair and support	Performance of a contract
Comply with tax, accounting and legal duties	Legal obligation
Fraud prevention, security, and protecting our rights	Legitimate interests
Marketing by email, SMS or WhatsApp, abandoned-cart reminders, loyalty and referral	Consent, withdrawable at any time
Analytics, personalisation and advertising	Consent for non-essential cookies; legitimate interests for essential analytics

4. Marketing and Your Consent

We send marketing only where you have opted in, and you can unsubscribe from any channel at any time via the link in the message or by contacting us. We may send service messages about your order, dispatch and warranty on a non-marketing basis as part of fulfilling your order.

5. Who We Share It With

We share personal data only with service providers who process it on our instructions under contract, including our store and hosting platform (Shopify), payment gateways, couriers and fulfilment partners, email, SMS, WhatsApp and reviews platforms, analytics and advertising partners, and accounting, tax and fraud-prevention tools. We do not sell personal data, and we do not "share" it for cross-context behavioural advertising except through the advertising cookies you consent to.

6. International Transfers

Because our partners operate globally, your data may be processed outside your country, including outside India and the EEA. Where we transfer EU/UK data internationally we rely on appropriate safeguards such as Standard Contractual Clauses. Transfers from India follow the DPDP framework and any government-notified restrictions in force at the time.

7. How Long We Keep It

We keep personal data only as long as needed for the purpose collected. Order and tax records are retained for the period required by law, in India generally up to 8 years for tax and accounting. Account and marketing data are kept until you close your account or withdraw consent, then deleted or anonymised. We delete data that is no longer needed.

8. Your Rights

Subject to your jurisdiction, you may access a copy of your data, correct it, delete it, restrict or object to processing, port it, and withdraw consent. EU and UK residents may complain to their supervisory authority. Indian residents may approach our Grievance Officer and then the Data Protection Board of India. US-state residents have rights under applicable US state privacy laws. We verify identity before acting on a request and respond within the statutory timeframe.

9. Children

The JEMFYRD store is intended for adults. You must be 18 or over to purchase. We do not direct the store to children or knowingly collect their data. Where India's DPDP rules require verifiable parental consent for anyone under 18, we will not process such data without it.

10. Security

We use technical and organisational measures, including encryption in transit, access controls, vetted processors and breach procedures, to protect your data. We will notify you and the relevant authority of a reportable breach within the timelines the law requires.